Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
4ba8e7eab5f3e64d2f7a9bdfc0be267d666da15616461b99175978d370eb338b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4ba8e7eab5f3e64d2f7a9bdfc0be267d666da15616461b99175978d370eb338b.exe
Resource
win10v2004-20220812-en
Target
4ba8e7eab5f3e64d2f7a9bdfc0be267d666da15616461b99175978d370eb338b
Size
4.2MB
MD5
bf41cab069505d410fdf1f1bb2207498
SHA1
d690c276d0d5e9ec2f4863ced7950b59c4a9d2ed
SHA256
4ba8e7eab5f3e64d2f7a9bdfc0be267d666da15616461b99175978d370eb338b
SHA512
5a335e51305713b35607359cbe844174a536d5707b40a6bcfcc69953cf8ee845d1d877fcd5a52989b17697b50f66b52956ed25d01174583e683d8deef177bca1
SSDEEP
98304:cDbDg7bIMBU9F9UwCtYcXobicvIiaoeqsdrptf8:s83BU97UwMrcPeqsBf8
Processes:
resource | yara_rule |
---|---|
sample | vmprotect |
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetProcessMemoryInfo
tcp_local_address
MiniDumpWriteDump
SHDeleteKeyW
WSAGetLastError
GetAdaptersInfo
GetFileTime
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
EnumDesktopWindows
MessageBoxA
RegQueryValueExW
CoCreateGuid
SHGetFolderPathW
OleLoadPicture
WinVerifyTrust
RefreshPolicyEx
SetDIBColorTable
AlphaBlend
GetFileTitleW
ClosePrinter
ImageList_GetIconSize
OleUIBusyW
GdipCreateFromHDC
LresultFromObject
ImmGetContext
PlaySoundW
GetFileVersionInfoSizeW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ